Vulnerability Description
A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ch22 Firmware | 1.0.0.1 |
| Tenda | Ch22 | - |
Related Weaknesses (CWE)
References
- https://github.com/QIU-DIE/CVE/issues/23ExploitIssue Tracking
- https://vuldb.com/?ctiid.329946Permissions RequiredVDB Entry
- https://vuldb.com/?id.329946Third Party AdvisoryVDB Entry
- https://vuldb.com/?submit.674165Third Party AdvisoryVDB Entry
- https://www.tenda.com.cn/Product
- https://github.com/QIU-DIE/CVE/issues/23ExploitIssue Tracking
FAQ
What is CVE-2025-12274?
CVE-2025-12274 is a vulnerability with a CVSS score of 8.8 (HIGH). A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument p...
How severe is CVE-2025-12274?
CVE-2025-12274 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-12274?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ch22 Firmware, Tenda Ch22.